This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File:                     I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier:          1CTJVH36sYIw4crZKPLxAL2Q9lGrRaCVhab7v3xuCTg=
Subject key identifier:   EE:4E:29:07:6F:54:C8:B2:31:8D:70:66:7B:BF:B5:04:EB:21:68:68
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer:       /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial:       019C1B70225EF445A79669B9E6F8D9946D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number:          08CC
Signing time:             Sun 01 Feb 2026 23:00:59 +0000
Manifest this update:     Sun 01 Feb 2026 23:00:59 +0000
Manifest next update:     Mon 02 Feb 2026 23:00:59 +0000
Files and hashes:         1: 7JgH3BufGryuzD8TkhKGrSgU0Jw.roa (hash: dvhqnEVhtzVA7d1uxkYo+L/AWZ2qs2JaTtSDOyZBFEw=)
                          2: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: Q1nKCj4aC2eiq1CnWL+0kEhddl2BWRElPk9NnQT0xkg=)
                          3: jcxnuuzpk8YEGgKb-Yvf2uSR1-E.asa (hash: V2pEeg2ELyqXGtM9iC5bzhoziEpzlbl43BPulkWtu0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1b:70:22:5e:f4:45:a7:96:69:b9:e6:f8:d9:94:6d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
        Validity
            Not Before: Feb  1 23:00:59 2026 GMT
            Not After : Feb  2 23:00:59 2026 GMT
        Subject: CN=ee4e29076f54c8b2318d70667bbfb504eb216868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:20:99:53:7d:0b:b3:ff:aa:cf:d1:26:14:
                    50:4c:b5:c3:8a:be:be:ba:8e:fb:92:14:1b:ce:21:
                    6d:d3:67:e2:b2:52:64:bf:c6:0a:6e:82:01:7c:98:
                    bf:b5:7a:ee:04:25:c4:09:36:52:59:e7:c1:e0:d3:
                    23:ce:84:ec:bd:96:1e:4d:a5:62:a5:5c:39:43:2d:
                    a8:cd:b9:6b:50:b0:14:5f:d9:8c:7c:93:b4:4a:a4:
                    4f:5d:1d:d5:9c:96:ab:c6:6a:63:99:f4:dc:46:e1:
                    0b:2e:93:a1:47:df:e6:38:1f:2c:0c:11:db:51:98:
                    b2:a4:ad:b0:f7:2e:2c:3f:49:d1:5d:1e:36:bc:16:
                    b0:25:31:db:09:0c:01:6c:bd:44:13:08:1a:a2:0f:
                    69:d1:e3:95:73:b9:87:e9:64:ca:50:46:77:79:be:
                    9d:34:71:49:f3:2f:d6:5c:e9:12:46:55:21:fd:44:
                    b7:28:b9:c1:b3:69:89:55:b2:84:dd:19:91:99:7f:
                    3a:0e:27:a9:47:82:6f:5e:9a:83:7f:e5:79:00:3c:
                    f5:4b:f0:58:d4:c1:ab:9f:ca:06:c8:12:84:30:23:
                    e1:67:63:68:2a:b1:fb:4d:83:3f:0a:55:c6:1c:20:
                    ce:51:37:c7:b9:7c:1f:92:5c:f4:34:99:9b:59:c2:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4E:29:07:6F:54:C8:B2:31:8D:70:66:7B:BF:B5:04:EB:21:68:68
            X509v3 Authority Key Identifier:
                keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:08:2d:2f:d5:d3:a2:65:02:f1:68:3a:81:32:03:f9:4d:e8:
         fb:2d:2f:43:a0:27:82:41:7d:c2:6d:44:2f:9f:d9:91:6e:70:
         6c:57:d1:51:1c:e4:28:5b:70:47:28:56:80:73:16:10:1d:fd:
         20:b3:65:9b:5e:e5:61:95:eb:a9:e0:bf:68:2d:af:00:5b:cc:
         49:b1:42:dc:a0:cc:30:7c:6a:78:49:35:56:6f:85:3e:09:1e:
         df:62:61:3b:2e:15:e2:a3:75:84:aa:c8:9d:50:f8:bc:dc:75:
         ef:46:98:7b:02:60:5d:97:f4:3e:ce:54:01:31:20:23:a1:85:
         c9:ce:0b:06:9c:3c:be:95:f9:91:cf:5f:bc:4b:d8:14:7b:c2:
         4a:1a:16:a8:86:8e:ba:78:f0:32:5a:d5:c2:af:8f:28:65:1f:
         fe:a8:cb:9c:54:bc:94:da:24:fd:c2:cb:21:8d:7d:94:cc:a7:
         fb:2f:c7:91:71:f4:46:24:c0:49:30:68:51:8f:c3:32:1d:47:
         da:1b:ab:1c:15:e8:d2:00:25:83:60:51:ec:f6:b2:b8:6b:c2:
         01:23:18:91:fa:45:66:9a:95:6f:1c:99:14:b7:48:e2:1e:1d:
         98:7a:e3:93:c6:f0:1e:fe:d8:8e:d6:46:47:00:24:bd:90:ea:
         6d:33:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:15:39 2026 by rpki-client